HKCERT said on 14 October 2026 that several security flaws were found in Fortinet products. It said an attacker working from outside could use some of them. The listed results are script injection into web pages (cross-site scripting), service outages, higher access rights, data leaks and changed data. HKCERT named FortiAnalyzer and FortiManager, versions 6.2.0 to 6.2.6, as affected. It linked to six Fortinet advisories: FG-IR-20-005, FG-IR-26-177, FG-IR-26-178, FG-IR-26-181, FG-IR-26-182 and FG-IR-26-184.
HKCERT says only that "some" of the flaws can be used this way. It does not say which flaw causes which result. The bulletin gives no CVE numbers (the public IDs for flaws) and no severity ratings. It does not say which advisory covers which product, or which versions contain fixes. It also does not say whether anyone is exploiting the flaws. HKCERT tells readers to check the vendor's website for details before installing the software.
Teams that run FortiAnalyzer or FortiManager 6.2 can compare their version with the range HKCERT lists. The six Fortinet advisories are the place to learn which flaws apply and what the vendor advises.